Privacy, in plain words.

What we collect today. If you open a studio: your UmmahPass sign-in (name and email), plus your studio name and any bio you add. If you join the opening-day list: your email. If you place an order (including a test order): your name, email, and shipping address, kept with the order. If your first visit came through a campaign or partner link, we keep the campaign tags in that link (utm_source, utm_medium, utm_campaign, utm_term) and the page you first landed on with your cart, and with the order if you place one. If you ask to be told when we ship to your country: your email and that country. Standard server logs record IP addresses for security.

Order emails. If you place an order, we email you about that order, confirmation, shipping updates, and anything that goes wrong. These are not marketing email; we send them because they're how we tell you what's happening with something you bought.

The "New on the wall" newsletter. If you sign up (footer form, or the order-confirmation page), we collect your email, how often you asked for ("weekly digest" or "every new piece"), and where you signed up. This is double opt-in: signing up sends a confirmation email, and nothing else sends until you click it. Buying something never signs you up on its own, the order-confirmation checkbox is a separate, explicit choice. Every newsletter email has an unsubscribe link (one click, no login). We do not track whether you open or click these emails, no tracking pixels. If you unsubscribe, we keep your address on file only to remember not to email you again (suppression), or delete it entirely on request.

Sending a gift, where they choose the piece. If you send someone an UmmahArt gift, we ask you for their name and email address so we can tell them about it. We use that address once, to send them the gift. We do not add them to any list, we do not email them again, and we do not pass the address to anyone else. If they choose to buy something or sign up themselves later, that is their decision and it starts a new record. They can ask us to delete their address at any time by replying to that email or writing to salaam@ummahart.com. The gift itself has no expiry date.

Sending a gift, where you choose the piece. If you tick “this is a gift” at checkout, the delivery address you type is the address the parcel goes to, and we keep it with the order the same way we keep any delivery address. We also keep the name you want on the note and the message you write, so we can show them to the person receiving it. Order emails still come to you, because it is your order. Their email address is optional: if you leave it blank the gift still works, and we give you a link to send them yourself. If you do give it, we use it once, when the piece ships, to send them your note. Never at the moment you pay, so a gift you cancel never reaches them. We do not add them to any list, we do not email them again, and we do not pass the address to anyone else. They can ask us to delete it at any time by replying to that email or writing to salaam@ummahart.com.

Site search. When you search, we keep the words you typed, the number of results, a one-way hash of your IP address and a session token, for 30 days. We use it to see what people look for and to stop one machine counting many times. We do not link searches to your account.

Reviews and photos of what you bought. If you write about a piece you bought, or send us your words and a photo and say we may share them, we show them on that piece's page and may show them on the homepage, with the name you choose. A review from a buyer is marked “Bought this piece”; words from our own team say so. We remove location data from photos before they appear. You can ask us to take your words or photos down at any time by writing to salaam@ummahart.com.

What we do with it. Every piece an artist uploads is checked before it can sell. The opening-day list is used for one email only, the one saying the shop is open. We measure site visits with self-hosted analytics on our own servers: the pages you open (search pages included) and a few actions, such as moving through the pieces on the homepage, adding to your cart or starting checkout. Your visit data is not shared with advertising companies.

Where a visit came from. If your first visit came through a campaign or partner link (for example, an UmmahArt banner on another site), we save the campaign tags in that link (utm_source, utm_medium, utm_campaign, utm_term) and the page you first landed on with your cart, and with the order if you place one. We use this to know which ads actually bring buyers. It stays on our own servers, and we do not share it with advertising companies. You can ask us to delete it at any time by writing to salaam@ummahart.com.

Artist referral links. When you arrive through an artist's own referral link, we keep that link's tags and the page you landed on, and a scrambled daily marker we use to count visits so the artist's credit is right. The marker changes every day and cannot be turned back into an address. You can ask us to delete it at any time by writing to salaam@ummahart.com.

Telling us where you are, when we cannot ship to you yet. Blankets, Greeting cards, Hoodies, Magnets, Mugs, Pillowcases, Sweatshirts and T-shirts ship to most countries. Framed prints and Posters currently ship within the United States only. Your product page shows exactly where an item can go, and what it costs, before you pay. If we cannot deliver to your country yet, you can leave your email address and your country so we can tell you when we open it. We store exactly those two things and the date. We use that address once, for that one message. It does not sign you up for the newsletter and it does not go on any other list, if you want the newsletter as well, that is a separate box you tick yourself. Every such message carries a one-click unsubscribe, and you can ask us to delete the entry at any time by writing to salaam@ummahart.com.

What we do not do. We do not sell your information. The home and shop pages show ads from Muslim Ad Network, which load from our ad partner's server; no other third-party advertising code runs here, and there is none at all on artwork, studio, cart or checkout pages. There is no Google Analytics and no Meta pixel on this site. Muslim Ad Network's ad server (EPOM) does run here on the home and shop pages, and can set a cookie. Some paid ads it serves carry a Google Campaign Manager 360 (DoubleClick) tag, which can set its own cookie and read your device, browser and IP address. We do not control what Google does with data its own tag collects. There is no email open/click tracking on this site's own newsletter.

Removal. Email salaam@ummahart.com, reply to any email from us, or use the unsubscribe link, and we delete your studio profile, list entry, or newsletter subscription. This includes the words and photos you shared with a review.

Payments. Card payments are processed by Stripe; card numbers never touch our servers.

This page was last updated on October 1, 2026. UmmahArt is run by Ummah Media Group LLC.